Manifest

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft
File:                     2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft (raw, json)
Hash identifier:          Sl/7WaqSczl4jTrsPUkqqAHMq/6tC6hyAHyfbnkvyEA=
Subject key identifier:   1A:A5:00:3C:C5:29:AD:74:3E:B8:B4:BA:86:CB:C5:37:A7:58:61:4C
Authority key identifier: 92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37
Certificate issuer:       /CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa
Certificate serial:       1D756C92AA9966711BC15226F2B73113CDEC7CDA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft
Manifest number:          41
Signing time:             Wed 11 Nov 2026 18:26:36 +0000
Manifest this update:     Wed 11 Nov 2026 18:26:36 +0000
Manifest next update:     Sun 15 Nov 2026 18:26:36 +0000
Files and hashes:         1: 14d589f0-87a0-4ca0-a51e-0970817c62bf.roa (hash: fSugkL4Q0YXG4DKR0y6RWU+nZZPKfrryYRWswSgn+Hs=)
                          2: 2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl (hash: F5Ad63Rq1+ORVOD4yqIHi4oey7ban8aTi9QalPgdWJk=)
                          3: 4f87a95e-4497-4fbd-b628-31fbbacbd027.roa (hash: PDgE0crjQ8tYm2gqjpY0RhyRWkBXanflvaqlQrwtEZg=)
                          4: 4fa8c56f-7f02-4100-817f-2d0cd027c296.roa (hash: Ap90c1n4q1smiq4/fEaAsgmK7SxCl6GIkIZuC4DG2fU=)
                          5: 505554a5-ac18-4ab7-86c3-4c65e7fc6528.roa (hash: GgGo9omWwak6dTg4UYa3Eh2mph9iDA6t+4Sk5Q8OhdY=)
                          6: 51a6767b-5cd8-447b-9e40-af3d381f06d9.roa (hash: 2iGOJctodi/c/M/6E4KLDLq/mQ01w9+OOZhzjirPQLY=)
                          7: 5a0f4bab-1675-4fb2-9e0a-6b7b980e771b.roa (hash: cD2GV6tJ0J1AM9U/MIw2HtfkhaRebjRiGxTmaO0RDSE=)
                          8: 5d843e71-5eed-4619-84e3-9599af1aec20.roa (hash: ObhHheBWr6K8l6Th0DFSONbUWJ89bQtl/HiRzDHX7jY=)
                          9: 748bc974-15bf-4127-b751-b0c5892afa62.roa (hash: 1CHJEoplJ8WBhDeP5M2xuPB05pNjf8TYUgzBiv3WUlc=)
                          10: 7b5cc055-231e-450c-931f-9759c3c3c509.roa (hash: lOpYJQopvIbh3NOmm8bi2LSNxaEhwoqBiWbsDZonX8I=)
                          11: 8393bdec-e2c0-4b0e-95da-a775d843051b.roa (hash: yKU5yl7FiowdNgLJG0zVhoxSR2AFb757QtGHdDtIIsY=)
                          12: 886be413-1230-433e-b3b4-5e1424c355a5.roa (hash: aoBs1CRDQ3nfsH6ybjdLjslP4xavzkghhZQ5zPy/jXA=)
                          13: a4e8e605-a3b6-44f3-b37b-af4cfe963671.roa (hash: CYFtIurvEKbSTu/EoB9EQ5sQdLtkJo4HHv5CtloS01A=)
                          14: b1c7afbd-7bc2-44a2-895b-2fc3d29d48c1.roa (hash: N66diOlOHSc0NhrHey7B3Ug9L8VTqTEyp+/+bzSyUKU=)
                          15: b25a7b86-03f8-445b-b95f-ecc27018571c.roa (hash: RyTKaonJGhrVGeXBjIZ5xSxJmpZfJ4OTFDZV8p/b9Gg=)
                          16: cdc50576-6f70-4d24-a6be-1ca97e957252.roa (hash: LdvfJkFMKm5tx0Qvei3ryy+lvFn8jgoIvhOfs87G4FE=)
                          17: f49f34f8-a6f9-4143-9e70-e3580436f6eb.roa (hash: iD6D1hU6ULzYNOP/xCypHYvulloy+MXtAthSIuWNXOI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:6c:92:aa:99:66:71:1b:c1:52:26:f2:b7:31:13:cd:ec:7c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa
        Validity
            Not Before: Nov 11 18:26:36 2026 GMT
            Not After : Nov 15 18:26:36 2026 GMT
        Subject: serialNumber=7b9df8f75d6c04fcc7d765f2867c7ccc6ed80c9f7728a8d29c136bec957d13f1, CN=d1919fe1-fabb-4f1f-bd3c-f678a08d63c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:da:e5:f7:cc:32:93:dc:de:1a:7f:00:1c:
                    08:2a:48:bb:f4:6c:42:06:26:dd:e8:8d:69:48:c6:
                    aa:e2:1e:1e:e0:32:2c:32:cc:07:b4:fe:2a:dc:b5:
                    23:0f:45:40:08:f5:db:6f:4c:b2:59:90:9c:df:57:
                    eb:97:93:79:d0:69:43:77:fe:1e:eb:27:4d:06:0c:
                    c2:ee:a5:b6:33:be:98:19:32:46:7c:83:7a:a8:77:
                    a7:12:fe:57:65:d5:70:30:30:ad:08:c8:d5:44:e9:
                    d1:64:20:88:ad:3a:9a:03:85:14:29:e2:7b:dd:a1:
                    ea:7b:a3:04:36:59:54:09:5a:4b:82:f2:94:0f:28:
                    70:d4:f3:ad:35:f5:ca:2b:25:7f:1d:5a:0c:f8:82:
                    81:37:fd:08:3a:64:c5:c6:d8:bc:1d:4c:f0:eb:05:
                    74:9c:10:f4:0d:ae:3b:6e:26:79:9e:2f:48:f1:90:
                    54:0f:db:88:cb:7b:19:fe:0d:c6:30:5e:a6:31:a2:
                    f0:f8:17:ce:8e:29:d4:8f:dd:05:c5:c9:64:eb:0e:
                    f3:4c:b7:3b:2d:b1:d8:7b:e4:26:f5:01:e4:ed:d5:
                    b4:b7:84:50:0f:1d:12:da:17:99:0e:bc:fa:cd:df:
                    f7:cd:b6:f5:91:89:3a:31:b3:85:10:84:a7:81:18:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A5:00:3C:C5:29:AD:74:3E:B8:B4:BA:86:CB:C5:37:A7:58:61:4C
            X509v3 Authority Key Identifier:
                keyid:92:85:1E:7D:4F:A4:4E:68:0D:DB:80:F8:18:68:CB:75:0D:AD:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/dfdbbcf3c1da5a68aad43716659435465e75060c85ba5464aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/d1dfea23-5e38-441e-9bf7-e1ceb6e86925/2lpoqtQ3FmWUNUZedQYMhbpUZKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:47:09:08:4d:53:72:b8:25:0f:fe:d5:e7:7d:a5:51:ca:
         e0:64:5d:57:f7:d5:17:94:84:78:00:b9:db:ce:fa:81:f4:eb:
         45:a5:91:86:d6:b0:55:9e:16:b0:32:7e:84:66:fa:9d:f5:91:
         8e:72:ba:20:47:a6:d8:f0:ba:36:0f:1b:a9:34:4e:12:42:a3:
         d7:00:39:16:46:1b:5c:a2:3d:13:5d:62:8b:e4:72:41:27:f9:
         71:38:38:32:ee:de:ce:e2:cd:c7:11:4d:fa:9e:a8:38:9e:c1:
         72:b0:91:17:67:c3:29:08:ff:23:85:da:cf:15:e4:e0:be:f1:
         13:f7:49:89:d4:53:8d:14:18:c4:6c:88:64:90:c3:a5:68:e5:
         b1:37:ea:a6:b9:e2:de:bf:8d:8c:04:10:c1:84:ea:df:34:ed:
         1c:26:e2:4e:13:0b:42:d1:cb:c7:bf:10:4a:a1:5d:be:be:e5:
         3f:ee:8b:c4:31:78:32:33:45:8f:60:f1:fa:10:34:90:11:0b:
         b3:d7:0e:63:29:7c:75:d5:66:cd:aa:cd:e0:ea:ea:03:31:79:
         e3:d0:2c:a6:ed:bc:20:aa:f7:84:df:bb:5e:60:89:03:c5:23:
         77:d3:29:b7:18:7b:27:0a:3e:bd:46:ca:9b:f1:a9:bf:47:76:
         f6:41:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 15:31:05 2026 by rpki-client